Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          A3PkfV+JUlIBxpscggxVI08I1rvKECNt/k2a2qWehmg=
Subject key identifier:   DD:4B:A5:3F:90:D4:20:A3:76:41:32:94:57:66:37:62:66:0A:4F:A1
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019CAEA2F6C639BCBAE412E675F64C4F989E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          1859
Signing time:             Mon 02 Mar 2026 13:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:41 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: ip4LJmiCbTz0Z3M4cgS3nSIex1OGyxMfmfeyWsPW0aQ=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:f6:c6:39:bc:ba:e4:12:e6:75:f6:4c:4f:98:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Mar  2 13:00:41 2026 GMT
            Not After : Mar  3 13:00:41 2026 GMT
        Subject: CN=dd4ba53f90d420a37641329457663762660a4fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:6a:80:f0:32:51:bb:7c:ea:db:d0:39:75:
                    fa:2d:bb:97:3a:74:8e:08:7c:65:94:2c:61:b7:c2:
                    a3:fd:30:cb:c1:30:dc:ce:c6:dd:7c:c1:7d:65:7d:
                    d2:95:8d:95:46:15:11:db:8f:d4:8e:cc:b2:61:5d:
                    cd:5d:a3:8f:af:e3:24:87:28:4c:5e:eb:92:43:cb:
                    83:ce:99:6f:5f:99:0c:d3:ce:e2:22:a5:01:78:7b:
                    01:63:05:86:f6:3e:95:52:3f:00:f0:d0:46:1f:64:
                    ab:d7:3b:a5:83:a1:33:f8:fd:56:f4:d1:40:06:87:
                    6d:3a:e6:7d:58:4c:8c:75:74:24:b5:e3:52:5e:25:
                    3e:25:b4:b6:2f:b1:86:df:94:bf:f5:85:15:01:fc:
                    00:b2:bf:d2:9a:8c:27:cb:18:6d:2b:d0:42:eb:7d:
                    99:cf:37:36:21:ee:83:e9:54:1e:f8:4a:3f:7e:4f:
                    20:5d:75:33:81:88:61:fc:45:85:38:23:fc:ab:6e:
                    b5:f0:da:63:11:47:e3:dc:cc:cc:7a:89:72:e8:0e:
                    59:c1:f3:da:e4:71:1f:48:0e:59:70:b4:ad:81:6e:
                    52:7e:00:43:55:ed:a8:84:4e:25:ac:3a:f0:e5:08:
                    d7:b7:2e:e9:02:cb:d0:a6:11:87:a8:20:e6:ab:e4:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4B:A5:3F:90:D4:20:A3:76:41:32:94:57:66:37:62:66:0A:4F:A1
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:19:00:ca:4b:d1:04:eb:37:4a:41:8b:15:32:97:df:b9:
         e4:1d:22:c0:5d:da:18:f8:65:bd:5d:bb:1e:f1:99:8b:15:7f:
         fc:a6:ea:35:62:d4:ca:bc:90:d8:62:c0:ab:48:1e:f6:80:d7:
         64:03:31:29:b1:2d:59:98:a2:ef:6b:f6:58:26:86:44:ce:36:
         ad:5c:a9:00:0d:c4:25:99:5e:07:df:0d:e2:81:a7:d4:3f:9e:
         79:e4:7c:38:da:b5:6c:74:b8:b2:76:c2:1e:76:f3:88:bd:20:
         bf:ce:c6:05:26:b4:fd:78:63:81:fb:5c:f0:4f:6e:d2:33:49:
         99:7a:91:87:60:bd:f1:7e:66:8f:bd:94:62:16:32:3a:46:2a:
         da:33:56:33:d0:88:d1:6f:95:3c:6e:6a:fb:42:59:54:38:91:
         e1:c2:c7:72:36:39:f2:52:49:26:c1:73:23:b8:e0:fe:71:92:
         16:9b:33:dd:97:fb:dd:da:bb:f3:64:a5:36:62:2b:20:17:c8:
         9c:c4:c2:33:2b:df:6a:9a:74:73:61:64:e0:72:81:dd:b2:b3:
         4a:0c:b5:1c:aa:c8:b8:a3:f3:9f:01:10:4b:be:de:d3:6c:f6:
         33:bc:88:d7:39:b4:ba:05:3c:ce:bd:fb:da:08:52:77:af:1a:
         91:f1:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:38 2026 by rpki-client